Temple University Fox School of Business MS Information Technology And Cyber Security MIS5201 SYLLABUS

Transcription

1 Fall 2014 Wednesdays, 5:30-8:00 Location: Alter Hall 745 Revision: 1.0 Instructor Michael Romeu-Lugo, CISA Adjunct Instructor, MIS Office Speakman Hall 209J Cell Phone: Regular Office Hours: Wednesdays from 4:00 PM to 5:00 PM By Appointment: Please contact me via or telephone COURSE OBJECTIVES In this course you will learn how IT audits are planned, organized and executed, and their results communicated to the organization. Students will learn how to develop and implement risk-based IT audit strategies and objectives in compliance with generally accepted audit standards to ensure that the organization s IT assets are adequately controlled, monitored, and assessed, and are aligned with its business objectives. Key areas will be: 1. Develop and implement a risk-based approach in compliance with IT audit standards ensuring that key areas of IT are included. 2. Design specific audits to verify whether information systems are protected, controlled and provide value to the organization. 3. Obtain evidence that is sufficient, competent, relevant and useful in achieving audit objectives. 4. Analyze the information gathered to identify reportable conditions. 5. Report the results of the audit to key stakeholders and make recommendations; effect change when necessary. 6. Conduct follow-ups and prepare status reports to ensure that appropriate and timely actions have been taken by management. GRADING Item Percent of Total Points Participation 20% Team Presentations/Reading 30% Quizzes (2) 25% Final Exam 25% Total 100% PARTICIPATION Much of your learning will occur as you prepare for and participate in discussions about the course material. The assignments, articles, and readings will be carefully chosen to bring the real world into class discussion while also illustrating fundamental concepts. Page 1

2 To encourage participation, 20% of the course grade is earned by preparing before class and discussing the topics between and in class. Evaluation is based on you consistently demonstrating your engagement with the material. Assessment is based on what you contribute, not simply what you know. 1. Preparation before class By Tuesday midnight, you will send me a brief (1 page) summary of the readings, including the articles and cases, assigned for the upcoming class period. Bring a copy for your reference during the discussion. Your weekly summary will briefly address and summarize: a. One key point you took from each assigned reading. (Two or three sentences per reading) b. One key point you learned from the readings as a whole. (Two or three sentences maximum) c. One question that you would ask your fellow classmates that facilitates discussion. 2. Participation during class We will typically start each discussion with opening questions about the assigned readings. I may ask for volunteers, or I may call on you. Students called on to answer should be able to summarize the key issues, opportunities, and challenges in the case study. All students should be prepared to answer these questions. 3. Participation between classes To facilitate ongoing learning of the course material, we will also discuss course material on the class blog in between class. Please ask any questions about the readings or cases on the blog so all can see the answers. Reading and commenting by all on these post will further the quality of our in-class discussions. Also, I will post a discussion question on the class blog every Saturday. The question will relate to the assigned reading, a topic discussed in class, or a relevant current event. Every student is expected to read and contribute to the online class discussion each week. The criteria for participation includes attendance, punctuality, level of preparation, professionalism, answering questions, discussing readings, discussing case studies, contributing to group activities, and contributing to a positive learning environment. Recognizing that students sometimes have unavoidable conflicts, the baseline for expected participation is assessed on one less week than the number of assigned weekly write-ups. TEAM ASSIGNMENTS All team assignments will be graded on a fail (70), pass (80), pass high (90) basis. You should read the description of my Grading Criteria (A, B, C) below in this document to understand what you need to achieve each grade. Page 2

3 QUIZZES We will have two short quizzes during the semester. These will be multiple choice tests using practice CISA examination questions. Together these exams are weighted 25% of your final grade. FINAL EXAM The final exam will use all multiple-choice CISA practice examination questions. The exam will be comprehensive. Everything we cover during the semester could appear on the final. The final exam is weighted 25% of your final grade. TEXTBOOKS 2104 CISA Review Manual, ISACA Cascarino, Richard: Auditor s Guide to Information Systems Auditing Available on ISACA s elibrary REFERENCE MATERIAL ITAF 3 rd Edition, A Professional Practices Framework for IS Audit/Assurance Available on ISACA s website ( ISACA Journal and JOnline articles Gartner Research CLASS READINGS I will assign readings from the CISA Review Manual and Cascarino s book. Articles and reference material from other sources such as ISACA.org and Gartner will be used to supplement your learning. New articles, research results and analyses are published regularly by these organizations. Please make sure to review our class blog regularly for the most up-to-date articles and reference material assigned for our sessions. Grading Criteria The following are the criteria used for evaluating assignments. You can roughly translate a letter grade as the midpoint in the scale (for example, an A- equates to a 91.5). Grade Criteria A- or A The assignment consistently exceeds expectations. It demonstrates originality of thought and creativity throughout. Beyond completing all of the required elements, new concepts and ideas are detailed that transcend general discussions along similar topic areas. There are few mechanical, grammatical, or organization issues that detract from the ideas. Page 3

4 Grade B-, B, B+ C-, C, C+ Below C- Criteria The assignment consistently meets expectations. It contains all the information prescribed for the assignment and demonstrates a command of the subject matter. There is sufficient detail to cover the subject completely but not too much as to be distracting. There may be some procedural issues, such as grammar or organizational challenges, but these do not significantly detract from the intended assignment goals. The assignment fails to consistently meet expectations. That is, the assignment is complete but contains problems that detract from the intended goals. These issues may be relating to content detail, be grammatical, or be a general lack of clarity. Other problems might include not fully following assignment directions. The assignment constantly fails to meet expectations. It is incomplete or in some other way consistently fails to demonstrate a firm grasp of the assigned material. ADDITIONAL INFORMATION o Please free to use office hours (without an appointment) to discuss any Availability of issues related to this class. Instructor o While every student is encouraged to visit with me during office hours to help them gain a better understanding of material which they didn t fully understand when they were in class, office hours are NOT for helping students catch up on material they missed because they were absent. Attendance o Class discussion in intended to be an integral part of the course. Accordingly, full attendance is expected by every member of the class. Policy o If you are absent from class, speak with your classmates to catch up on what you have missed. Class Etiquette o Please be respectful of the class environment. o Class starts promptly at the start time. Please make EVERY effort to be on time, as I will communicate important information in the first few minutes of class. o Cell phones must be turned off and put away during class. o Refrain from personal discussions during class. Please leave the room if you need to speak to another student for more than a few words. If a student cannot refrain from engaging in private conversation and this becomes a pattern, the students will be asked to leave the classroom to allow the remainder of the students to work. o There will be two examinations during the semester. The exams Exams cannot be made up, regardless of the reason for absence. Page 4

5 Appropriate use of Technology in the classroom o o Please turn off cell phones at the start of class. If you have an urgent, personal situation and may be receiving an important phone call during class, please let me know this at the beginning of class, sit near the door, and step out of the classroom if you need to take a call. Please bring your laptop or tablet to class. We want to explore these topics and there is a wealth of materials available online. I do expect that you will use your laptop for our course only while in class. PLAGIARISM, ACADEMIC DISHONESTY AND CITATION GUIDELINES If you use text, figures, and data in reports that was created by others you must identify the source and clearly differentiate your work from the material that you are referencing. If you fail to do so you are plagiarizing. There are many different acceptable formats that you can use to cite the work of others (see some of the resources below). The formats are not as important as the intent. You must clearly show the reader what is your work and what is a reference to somebody else s work. Plagiarism is a serious offence and could lead to reduced or failing grades and/or expulsion from the university. The Temple University Student Code of Conduct specifically prohibits plagiarism (see The following excerpt defines plagiarism: Plagiarism is the unacknowledged use of another person s labor, ideas, words, or assistance. Normally, all work done for courses papers, examinations, homework exercises, laboratory reports, oral presentations is expected to be the individual effort of the student presenting the work. There are many forms of plagiarism: repeating another person s sentence as your own, adopting a particularly apt phrase as your own, paraphrasing someone else s argument as your own, or even presenting someone else s line of thinking in the development of a thesis as though it were your own. All these forms of plagiarism are prohibited both by the traditional principles of academic honesty and by the regulations of Temple University. Our education and our research encourage us to explore and use the ideas of others, and as writers we will frequently want to use the ideas and even the words of others. It is perfectly acceptable to do so; but we must never submit someone else s work as if it were our own, rather we must give appropriate credit to the originator. Source: Temple University Graduate Bulletin, University Regulations, Other Policies, Academic Honesty. Available online at: For a more detailed description of plagiarism: o Princeton University Writing Center on Plagiarism: o How to successfully quote and reference material: o University of Wisconsin Writers Handbook o Page 5

6 How to cite electronic sources: o Electronic Reference Formats Recommended by the American Psychological Association o Page 6